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Introduction 

NETGEAR's Mode! FR314 Cable/DSL Firewall Router with 4-port switch provides your network with true 
hardware- based firewall security. Designed with Stateful Packet I nspection technology to prevent Denial of 
Service (DoS) attacks and malicious packets, it also gives you I nternet access filtering ability based on tirre 
of day, URL, or Web page content; high-speed I nternet sharing for up to eight PCs, upgradable to 45 PCs; 
Web-based setup; and logging and reporting capabilities. 

TNs guide shows you how to configure your NETGEAR firewall router and your PC network — which can 
i ncl ude Wi ndows and Macintosh platform personal computers — for secure I nternet access. For more 
detailed information about installation or for configuring advanced features, refer to the Reference Guide 
for the Model FR314 Firewall Router on the enclosed Model FR314 Resource CD-ROM . 



Setup Sequence 



1. Open the box and verify its contents 



2. Connect NETGEAR to your environment 



3. Reboot your network 



4. Launch your browser 



6. Enjoy being connected! 

t 



5. Test your network connection 




Plan Your Time 

E sti mated setup ti me for tha s product i s onl y I 
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NETGEAR 



NETGEAR, I nc. 

4500 Great America Parkway 

Santa Clara, CA 95054 

USA 

Phone: 1 833- NETGEAR 
E-mail: support@NETGEAR.com 
wvAuNETGEAR.com 

Support Information 

See Support I nformation Card for phone numbers. 
Internet /World Wide Web 

Go to http://www.NETGEAR.com for the NETGEAR Web page 

Defective or damaged merchandise can be returned to your point-of-sale representative 
I IMPORTANT! 

Please register online YOU MUST REGI STERTOOBTAI N TECHNI CAL SUPPORT. PLEASE 
RETAI N PROOF OF PURCHASE and this warranty information. To register your product, get product 
support, or to obtain product information and NETGEAR product documentation, direct your Web 
browser to the http://wwwNETGEAR.com Web page If you do not have access to the World Wide 
Web, you can register your product using the enclosed registration card and mail it to NETGEAR 
customer service 



, FR314 Firewall Router 





Resource CD, 
Warranty & Owner 
Registration Card, 
Support Information Card 



Category 5 
10/100 Mbps 
Ethernet cable 



Package Contents 

Make sure that your package contains the following: 

• FR314 Firewall Router 

• AC power adapter, 12 V DC output 

• Category 5 Ethernet cable straight-through wiring 

• Model FR314 Resource CD- ROM, including: 

- Reference Guide for the Model FR314 Firewall Router 

- Application notes 

• Warranty & Owner Registration Card 

• Support I nformation Card 
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2 CONNECT NETGEAR TO YOUR ENVIRONMENT 



Setting Up the Hardware 

The illustration below provides an example of how to connect and install your FR314 Firewall Router. 

12 V DC power 
Local Ethernet ports adapter outlet 

—I , Internet 

Ethernet port 




Normal/Uplink 
push button 




1 Cable or DSL modem 



Connecting the Router 

To connect your router: 

1. Connect the router's I nternet port to the Ethernet port on voir braaclxind (caMe or DSL) irodem 
Use the Ethernet cable that shipped vuith your broadband irociem to connect to the router. If you are 
using a DSL modern, the modem's oomection to the phone line remai ns unchanged. 

© Notes The Ethernet cable supplied by your ISP for connecting to your cable modem or DSL modem 
may have non-standard wiring. It is important to use this cable only to connect the modem to your 
router, not to connect your PCs to your router. 

2. Connect your PCs to the router's LOCAL ports. Use Ethernet cables to comect your PCs to the 
LOCAL ports of the router. One cable is provided with your router. The router senses the speed of the 
connected port (lO Mbps or lOO Mbps) and automatically matches the speed. 

@ Note: For all 100 Mbps connections, use Category 5 (Cat 5) Ethernet cables. Your FR314 Firewall 
Router package contai ns one Category 5 cable 

3. Connect the power adapter to the outlet on the rear panel of the router, and plug the adapter into a 
wall outlet. 

Verifying the Hardware Connections 

After applying power to the Firewall Router, you can followthese steps to verify that all connections were 
properly made 

1. When power is first applied, verify that the POWER LED is cn 

2. Verify that the TEST LED turns on within a few seconds. 

3. After approximately 90 seconds, verify thab 

• TheTEST LED has turned off. 

• The LOCAL LI NK/ACT LEDs are lit for any local ports that are connected. 

• The I NTERNET LINK/ACT LED is lit. If a LINK/ACT LED is lit, a link has been established to 
the connected device 

4. If any LOCAL port is connected to a lOO Mbps device, verify that the lOO LED for that port is lit 
Preparing Your Network 

All PCs in your network must have an installed Ethernet Network I nt erf ace Card (NIC). In preparation for 
using the router to connect your LAN to the I nternet, you need to do the following: 

1. Order I nternet service from an Internet Service Provider (ISP). See the "ISP Checklist" and 
"Account I rfbrmation" sections. 

2. Set up your PCs for using the Transmission Control Protocol/1 nternet Protocol (TCP/IP) networking 
protocol. See the "Network Checklist" section. 

ISP Checklist 

Contact an I SP to request a single-user I nternet access account that provides a broadband access device 
such as a cable modem or DSL modem to connect to the I nternet. This modern rrust be a separate physical 
box (not a card) and must provide an Ethernet port intended for connection to a Nl C in a PC. 

For a single-user I nternet account, your I SP supplies TCP/I P configuration information for one PC. With 
a typical account, much of the configuration information is assigned dynamically when your PC is first 
booted up while connected to the I SP, and you will not need to know that dynamic information. 

I n order to share the I nternet connection among several computers, your F i rewal I Router wi 1 1 take the 
pi ace of the single PC, and must be prograrrmed with the TCP/I P configuration information that would 
normally be used by that single PC. The Firewall Router then allows the PCs on the LOCAL network to 
masquerade as the single PC to access the I nternet through the broadband modern. The method used by the 
Firewall Router to accomplish this is called Network Address Translation (NAT). 

Account I nformation 

Unless the information is dynamically assigned, your I SP should provide you with the following basic 
account information: 

• I nternet P rotocol (IP) address and subnet mask 

• Domain NameSystem(DNS) server IP addresses 

• Gateway I P address 

• Host name and domai n name 

For example your account's mail server name may look like this: 
mail.xxx.yyy.com 

I n this example the domain suffix is xxx.yyy.com 



If an I SP technician configured your PC during modem installation, or if you configured it using instruc- 
tions provided by your I SP, you will need to obtain the account information from your PC's network setup. 
For information about this procedure refer to the Reference Guide for the Model FR314 Firewall Router 
on the Model FR314 Resource CD-ROM . 

Some I SPs require a special login protocol, such as PPP over Ethernet (PPPoE). I f your I SP requires 
one you need a login name and password, and you also need to select PPPoE when you configure the 
Firewall Router. After your network and Firewall Router are configured, the Firewall Router performs the 
login task when needed, and you will no longer need to log in from your PC. 

Network Checklist 

The FR314 Firewall Router uses the I nternet Protocol. I P configuration has the foil owing requirements: 

• All PCs must have the TCP/I P installed and selected as the networking protocol. See"Configuring 
Windows 95 or later versions of Windows for I P Networking," next. 

• All PCs and the router must be assigned I P addresses. The router's DHCP function automatically 
assigns I P addresses for you, but the PC's I P address must be set to "Obtain an I P address 
automatically" in the Network Control Panel. See "Configuring TCP/I P Properties." 

Configuring Windows 95 or Later Versions of Windows for I P Networking 

As part of the PC preparation process, you need to manually install and configure TCP /I P on each 
networked PC. Before starting, locate your Windows CD; you may need to insert it during the TCP/I P 
installation process. 

To configure Microsoft® Windows® 95 or later versions of Windows for I P networking: 

1. On the Windows taskbar, dick the Start button poirtto Settr^ ardthendick Control Panel. 

2. Double-click tfie Network icon. The Network window opens, vuNch displays a list of installed 

nfTrryimpt fc 

You must have an Ethernet adapter, theTCP/l P protocol, and Client for Microsoft Networks. 

@ Note: It is not necessary to remove any other network components shown in the Network window in 
order to install the adapter, TCP /I P, or Client for Microsoft Networks. 

I f you need the adapter: 

a) Click the Add button. 

b) Select Adapter, and then click Add. 

c) Select the iranufacturer and model of your Ethernet ada p ter, and then click OK. 
If you need TCP/IP: 

a) Click the Add button. 

b) Select Protocol, and then click Adci 

c) Select Microsoft. 

d) Select TCP/I P, and then dick OK. 

I f you need Client for Microsoft Networks: 

a) aide the Add button. 

b) Select Client, and then dick Add 

c) Select Microsoft. 

d) Select Client for Microsoft Networks, and then dick OK. 

3. Restart your PC for the changes to take effect 

Configuring TCP/IP Properties (Windows) 

NETGEAR recommends that you leave theTCP/l P setup parameters at their factory default settings unless 
you have a sped fi c reason to change them Wi th the def aul t setti ngs, your P C i s confi gured to obtai n i ts 
TCP/IP configuration information automatically from a DHCP server on the I ocal network. The FR314 
Firewall Router is shipped preconfigured as a DHCP server and assigns theTCP/l P configuration informa- 
tion as described below. You should also verify that your PC is set to "Obtain an I P address automatically" 
in the Network Control Panel. 



To confirm that I P addresses are automatically obtained: 

1. From the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. 

2. Double-click the Network icon. 

3. Select the Configuration tab 

4. From the list of network component^ select TCP/IP If you have several TCP/IP entries in the 
network components list choose the one associated with the Ethernet adapter in your PC. 

5. Click Properties. TheTCP/l P window opens. 

6. Select the IP address tab 

7. Click "Obtain an IP address automatically" 

8. Select the Gateway tali 

9. I f any gateway I P a dd resses are listed, remove them. 
TO. Select the DNS tab 

XL. Enter your ISP's DNS Server adefresses and dick OK, or dick "Disable DNS" to allow 
automatic assignment 

12. Click OK and close the Network Control Panel. 

13. Repeat this for each PC on your network. 

Configuring TCP/IP Properties (Macintosh) 

To configure the Macintosh for I P networking: 

1. Fromthe Apple menu, select theTCP/l P Control Panel. 

2. Fromthe "Connect via" box, select your Mac's Ethernet interface. 

3. Fromthe "Configure" box, select Using DHCP Server. 
You can leave the DHCP Client I D box empty. 

4. Close theTCP/l P Control Panel. 

5. Repeat this for each Mac on your network. 
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To obtain the configuration information from the router: 
1. Turn on the router. Be sire the router has been on tor at 



east one minute before CGrtiiurg to 



2. Reboot each PC on your network. 

3. Disconnect and then reconnect power to your broadband 



modem Wait for it to synchronize to 



4 LAUNCH YOUR BROWS 



From your browser, you can access the router's Setup Wizard, which walks you through the process of 
configuring your router for I nternet access. 

To configure your router: 

1. Launch your Web browser. 

2. In the browser's Acfcress box, type http://192.168.0.1 and press Eriber. A Login box appears. 

3. Type adrrin in the Name box, and password in the Password box, and then dick CK. If your 
FR314 Firewall Router password was previously cliangecl enter the current password. 

4. I n the Main Menu, select Setup Wizard. 

5. In the first Wizard window; choose a new Password and then dick Next. 

6. In the Time Zone window, select your time zone from the put I -down window and then click Next. 

7. If your ISP account requires a PPPoE login, you will seethe PPPoE window next. Enter your 
account login name and password, and then dick Next 

8. If your ISP account does not dynamically assign an I P address, you are p rom p ted to enter your static 
(fixed) a dd ress information in the next window. Enter the inftxmati on provided by your I SP and then 
dick Next 

9. In the ISP settings window, enter your account's Host Name and Domain Name, 

10. The final Setup Wizard screen opens. Click Finish. 

11. Reboot your FR3 14 Firewall Router, and then reboot the attached PCs. 

Your P Cs shoul d now have secure I nternet access. You can test thi s by browsi ng to any I nternet I ocati on, 
such as NETGEAR's Web site at www.NETGEAR.com 

For more information about installing your Firewall Router, seethe Reference Guide for the Mode! FR314 
Firewall Router on the Model FR314 Resource CD-RCM. 



Front: Panel 

The front pand of the M odd FR314 Firewall Router contains LEDs that provide diagnostic and 
connectivity information. 

Port LEDs 

_L 




Power 1 1 Test 
LED LED 



You can use some of the LEDs to verify connections. All LEDs are green when lit with the exception of 
TEST, which is amber. 



POWER 


On 


Power is supplied to the Firewall Router. 


TEST 


On 
Off 


The system is initializing. 

The system is ready and running. 


INTERNET- 
LINK 


On 


The 1 nternet port has detected a link with an 
attached device 


ACT (Activity) 


Blinking 


Data is being transmitted or received by the 
1 nternet port. 


LOCAL- 






LI NK/ACT 
(Link/Activity) 


On 

B 1 i nki ng 


The Local port has detected a link with an attached 
device. 

Data is being transmitted or received by the Local port. 


100 ( 100 M bps) 


On 
Off 


The Local port is operating at 100 Mbps. 
The Local port is operating at 10 Mbps. 
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When your FR314 Firewall Router and PCs are configured correctly, your Firewall Router automatically 
accesses the I nternet when one of your LAN devices requires access. It is not necessary to run a dialer 
application such as Dial-Up Networking or PPPoE Login to connect, log in, or disconnect. These functions 
are performed by the Firewall Router as needed. I n addition, the firewall functions are enabled and config- 
ured by default for basic security. 

To access the I nternet: 

1. From any PC connected to your router, launch a browser such as Micrceoft Internet Explorer or 
Netscape Navigator. You should see the Internet LED blink, ir t i cjjU ngcommuni ciJ l jo ritothe ISR 
The browser should begin to cisplay a Web page. 

2. If you havetroutale accessing the Internet, refer toti^ ''Troubleshooting'' sectioiicf trisguicte. 
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Your FR314 Firewall Router off ers the f ol I owi ng key features: 

• True firewall security 

• Uses Stateful Packet I nspection technology 

• Protects against DoS attacks 

• U p to eight P Cs can share one si ngl e-user broadband I i ne 

• Blocks unwanted traffic from the I nternet to your LAN 

• Enforces polides such as time-of-day and restricted Web access 

• Content filtering features prevent objectionable content from reaching your PCs 

• Configurable logging and alerting options 

• Port forwarding lets you direct incoming traffic to specific local PCs 

• Complete, easy- to- use Web browser based setup and configuration 

• Visual monitoring of router status and activity 

• I ntegrated 4- port 10/100 M bps switch 

• Flash EPROM for firmware upgrade 

• Five-year warranty 

• F ree techni cal support seven days a week, twenty-four hours a day 



The rear panel of the FR314 Firewall Router is shown below. You can refer to this diagramto identify the 
Firewall Router ports before you attempt to make any connections. 

12 V DC power 
Local Ethernet ports adapter outlet 

—I , Internet 

Ethernet port 



Normal/Uplink 
push button 



Power Switch 



The rear pand of the F R314 F i rewal I Router i ncl udes the fol I owi ng: 

• Erase Software switch 

• UP LI NK switch for connecting the firewall to a hub or switch 

• Local Ethernet ports for connecting the firewall to the local PCs 

• I nternet Ethernet port for connecting the firewall to a cable or DSL modem 
AC adapter connector 

• POWER switch 
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Symptom 


Cause 


Sol ution 


PWR and other LEDs 
are not lit when you 
switch on your router 


No power is received 
to the router 


M ake sure the power cord i s properl y connected to 
the router. 

M ake sure you are using the correct NETGEAR power 
adapter supplied with your router. 
M ake sure the power adapter is properly connected to 
a functioning power outlet. 

After you apply power to the router, theTEST LED 
should turn off after approximately 90 seconds. 
If theTEST LED does not turn off, switch off the 
router; then switch it on again. 


LOCAL or 1 NTERNET 
LINK/ACT LEDs do not 
light when connected to 
your P Cs or modem 


Hardware connection 
problem 


M ake sure the Ethernet cable connections are secure at 
the router and at the device to which you are connected. 
M ake sure the connected devi ce i s powered on. 
Be sure you are using the correct cable 

• If you are connecting one of the router's LOCAL 
ports to a PC, use a standard straight-through 

E t her net cabl e 1 i ke the one provi ded wi th your router. 

• When connecting the router's 1 NTERNET port to a 
cable or DSL modem, use the Ethernet cable that 
your 1 SP supplied with the modemThis cable may 
have a non-standard (crossover) wiring. 

• If you are connecting the router's LOCAL port 4 to 
a PC, set the NORMAL/UPLINK switch to the 
NORMAL position. 

• If you are connecting the router's LOCAL port 4 to 
another hub or switch, set the router's NORMAL/ 
UPLINK switch totheUPLINK position unless you 
are connecting to the other hub's UPLINK port. 


Router is unableto 
1 oad any Web pages 
from the 1 nternet 


Your P C may not 
recogni ze any DN S 
server addresses 


A DNS server is a host on the 1 nternet that translates 
1 nternet names ( such as WWW addresses) to numeric 1 P 
addresses. Typically your ISP will provide the addresses 
of one or two DNS servers for your use. 1 f you entered a 
DNS address into your router during the configuration, 
reboot your PC and verify the DNS address as described 
in "Verifying TCP /I P Properties." Alternatively, you may 
manually configure your PC with DNS addresses as 
explained in "Configuring TCP /I P" in the Reference 
Guide for the Model FR314 Firewall Router. 




Your P C may not have 
the router configured 
as itsTCP/l P gateway 


If your PC obtains its information from the router by 
DHCP, reboot the PC and verify the gateway address as 
described bdow in "Verifying TCP /I P Properties." 




Your router may have 
been unabl e to obtai n 
a WAN IP address 
from the ISP 


Verify that the router has a WAN IP address by fol 1 ow- 
i ng these steps: 

1. 1 n your browser's Address box, type 
http://192.168.0.1 and press Enter. 

2. Log in to the Web Management 1 nterface by typing 
admin in the Name box and password (or the 

current password) in the Password box. 

3. 1 n the navigation bar on the left, click General and 
then sdect Network. 

4. Check that an 1 P address is shown for the WAN 
Port. If no WAN IP address i s shown, reconfi rm the 
configuration information from your ISP. 


Verifying TCP/1 P Props 


rties (Windows) 





After the Windows PC is configured and has rebooted, you can check the TCP/I P configuration using the 
Windows utility winipcfg.exe (for Windows NT systems, use ipconfig.exe). 

To check your PC'sTCP/l P configuration: 

1. QitheWindowstaskbar, dick the Start button, and then dick Run The Run wirclow opens. 

2. Type winipefg, and then dick CK. The I P Configti-ation window opens. 

3. Select your Ethernet adapter. The window is updated to show your settings, which should match the 
values below if you are using the default TCP/IP settings that NETGEAR recommen d s 

• The IP Address is between 192.168.0.2 and 192.168.0.9 

• TheSubnet Mask is 255.255.255.0 

• The Default Gateway is 192.168.0.1 

4. Click More I nfo, and verify that the "DNS Servers" box displays one of your I SP's DNS server 

Verifying TCP/IP Properties (Macintosh) 

After the Macintosh has rebooted, check theTCP/l P properties: 

1. From the Apple menu, select theTCP/l P Control Panel. 

2. If you ate icing the default TCP/I P settings that NETGEAR tecomrnends, ycx»~ setting shexdd 
nutdi these: 

• The IP Address is between 192.168.0.2 and 192.168.0.9 

• TheSubnet Mask is255.255. 255.0 

• The Router address is 192.168.0.1 

• Name server address is one of your I SP's DNS server addresses 



Trademarks 

NETGEAR™ is a trademark of NETGEAR, I nc. Other brand and product names are trademarks or 
registered trademarks of their respective holders. I nformation is subject to change without notice 

Statement of Conditions 

I n the interest of improving internal design, operational function, and/or rdiability, NETGEAR reserves the 
right to make changes to the products described in this document without notice 

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or 
drcuit layout(s) described herein. 

Certificate of the Manufacturer/I mporter 

It is hereby certified that the NETGEAR Modd FR314 Cable/DSL Firewall Router has been suppressed in 
accordance with the conditions set out in the BMPT-ArrtsblVfg 243/1991 andVfg 46/1992. The operation 
of some equipment {for example test transmitters) in accordance with the regulations may, however, be 
subject to certain restrictions. Please refer to the notes in the operating instructions. 
Federal Office for Tdecorrrnuni cations Approvals has been notified of the placing of thi s equi pment on the 
market and has been granted the right to test the series for compliance with the regulations. 

Bestatigung des HersteHers/l mporteurs 

Es wird hierrrit bestatigt, daft das Modd FR314 Cable/DSL Firewall Router gemaft der im 
BMPT-ArrtsblVfg 243/1991 und Vfg 46/1992 aufgefuhrten Bestirrmungen entstort ist Das 
vorschriftsmaEige Betreiben einiger Gerate { z. B . Testsender) kann jedoch gewissen Beschrankungen 
unterliegen. Lesen Siedazu bittedieAnmerkungen in der Betriebsanldtung. 

Das Bundesarrt fur Zulassungen in derTdekommunikation wurde da von unterri chtet, daft dieses Gerat auf 
den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfullung der Vorschriften hin 
zu uberprufen. 

Voluntary Control Council for Interference (VCCI) Statement 

This equipment is in the second category (informati on equi pment to be used in residential areas) and con- 
forms to the standards set by the Vol untary Control Cound I for I nterf erence by Data P rocessi ng E qui pment 
and Electronic Office Machines that are aimed at preventing radio interference in residential areas. 

EN 55 022 Declaration of Coriformance 

This isto certify that the NETGEAR Modd FR314 Cable/DSL Firewall Router is sftd ded against the 
generation of radio interference in accordance with the application of Cound I Directive 89/336/EEC, 
Article 4a. Conformity is declared by the application of EN 55 022 Class B (CI SPR 22). 

Federal Communications Commission (FCC) Compliance Notice: Ratio Frequency Notice 

This equipment has been tested and found to comply with the limits for a Class B digital device pursuant 
to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful 
interference in a residential installation. This equipment generates, uses, and can radiate radio frequency 
energy and, if not installed and used in accordance with the instructions, may cause harmful interference 
to radio comrruni cations. However, there is no guarantee that i interference wi 1 1 not occur in a particular 
installation. If this equipment does cause harmful interference to radio or tdevision reception, which can 
be determined by turning the equipment off and on, the user is encouraged to try to correct the interference 
by one or more of the fol I owi ng measures: 

• Reorient or relocate the receiving antenna. 

• I ncreasethe separation between the equipment and receiver. 

• Connect the equipment into an outlet on a drcuit different from that to which the receiver 
i s connected. 

• Consult the dealer or an experienced radio/TV technician for hdp. 
Canadian Department of Communications Radio Interference Regulations 

This digital apparatus (NETGEAR Modd FR314 Cable/DSL Firewall Router) does not exceed the CI ass B 
limits for radio-noise emissions from digital apparatus as set out in the Radio I nterference Regulations of 
the Canadian Department of Communications. 

Reglement sur le brouillage radioelectrique du ministers des Communications 

Cetapparal numerique (NETGEAR Modd FR314 Cable/DSL Firewall Router) respecteles 

lirrites de bruits radioel ectri ques visant les appareils numeriques de classe B preschtes dans le Reglement 

sur le brouillage radioel ectri que du rrinistere des Communications du Canada. 



